CVE-2022-38163: F-Secure Safe

Low severity, CVSS 3.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Drag and drop operation by user on address bar could lead to a spoofing of the address bar.

Affected products

• F-Secure Safe: up to and including 19.0

Published 2022-11-07. Last modified 2026-06-17.